{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:53:33.742Z",
  "tag": {
    "id": "chrome",
    "label": "Chrome",
    "isStack": false,
    "url": "https://pwn.watch/t/chrome",
    "feed": "https://pwn.watch/t/chrome/feed.xml"
  },
  "counts": {
    "incidents": 30,
    "live": 1,
    "notFullyPatched": 1,
    "patched": 29
  },
  "incidents": [
    {
      "slug": "chrome-zero-day-cve-2026-87491",
      "title": "Chrome zero-day CVE-2026-87491 (V8 OOB write)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-87491",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-87491.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-87491"
      ],
      "affectedVersions": [
        "Before 153.0.8010.36/.37"
      ],
      "fixedVersions": [
        "153.0.8010.36+",
        "153.0.8010.37+"
      ],
      "startedAt": "2026-09-09",
      "closedAt": "2026-09-09",
      "updatedAt": "2026-09-09",
      "summary": "September 9 2026 Chrome 153 patched CVE-2026-87491, a V8 out-of-bounds write Google said was exploited in the wild — the seventh Chrome zero-day of 2026. Fixed in 153.0.8010.36/.37. CISA KEV listed.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-85046",
      "title": "Chrome zero-day CVE-2026-85046 (V8 type confusion)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-85046",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-85046.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-85046"
      ],
      "affectedVersions": [
        "Before 152.0.7977.82/.83"
      ],
      "fixedVersions": [
        "152.0.7977.82+",
        "152.0.7977.83+"
      ],
      "startedAt": "2026-09-04",
      "closedAt": "2026-09-04",
      "updatedAt": "2026-09-04",
      "summary": "September 4 2026 Chrome update patched CVE-2026-85046, a V8 type confusion zero-day Google said was exploited in the wild. Fixed in Chrome 152.0.7977.82/.83. Later added to CISA KEV.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-11645",
      "title": "Chrome zero-day CVE-2026-11645 (V8 OOB)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-11645",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-11645.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium V8",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-11645"
      ],
      "affectedVersions": [
        "Before 149.0.7827.102 (Win/Linux) / 149.0.7827.103 (Mac)"
      ],
      "fixedVersions": [
        "149.0.7827.102+",
        "149.0.7827.103+"
      ],
      "startedAt": "2026-06-01",
      "closedAt": "2026-06-30",
      "updatedAt": "2026-06-30",
      "summary": "June 2026 Chrome emergency update patched CVE-2026-11645, an out-of-bounds read/write in V8 exploited in the wild (fifth Chrome zero-day of 2026 at the time). Stable builds 149.0.7827.102/.103.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-5281-dawn",
      "title": "Chrome zero-day CVE-2026-5281 (Dawn / WebGPU UAF)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-5281-dawn.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium Dawn",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-5281"
      ],
      "affectedVersions": [
        "Pre-April 2026 Stable"
      ],
      "fixedVersions": [
        "April 2026 Chrome Stable"
      ],
      "startedAt": "2026-04-01",
      "closedAt": "2026-04-30",
      "updatedAt": "2026-04-30",
      "summary": "April 2026 Chrome patch for CVE-2026-5281, a use-after-free in Dawn (WebGPU), actively exploited in the wild.",
      "xPost": null
    },
    {
      "slug": "chrome-zero-days-cve-2026-3909-3910",
      "title": "Chrome zero-days CVE-2026-3909 (Skia) and CVE-2026-3910 (V8)",
      "url": "https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910",
      "json": "https://pwn.watch/i/chrome-zero-days-cve-2026-3909-3910.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-3909",
        "CVE-2026-3910"
      ],
      "affectedVersions": [
        "Pre-patch March 2026 Stable builds"
      ],
      "fixedVersions": [
        "March 2026 Chrome Stable updates"
      ],
      "startedAt": "2026-03-01",
      "closedAt": "2026-03-31",
      "updatedAt": "2026-03-31",
      "summary": "March 2026 Chrome updates fixed two actively exploited zero-days: CVE-2026-3909 (out-of-bounds write in Skia) and CVE-2026-3910 (inappropriate implementation in V8).",
      "xPost": null
    },
    {
      "slug": "chrome-zero-day-cve-2026-2441",
      "title": "Chrome zero-day CVE-2026-2441 (CSS use-after-free)",
      "url": "https://pwn.watch/i/chrome-zero-day-cve-2026-2441",
      "json": "https://pwn.watch/i/chrome-zero-day-cve-2026-2441.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chrome / Chromium",
      "tags": [
        "google",
        "chrome",
        "zero-day"
      ],
      "cveIds": [
        "CVE-2026-2441"
      ],
      "affectedVersions": [
        "Before Chrome 145.0.7632.75/.76 (Win/Mac) and related Linux builds"
      ],
      "fixedVersions": [
        "145.0.7632.75+",
        "144.0.7559.75+ (Linux per reports)"
      ],
      "startedAt": "2026-02-13",
      "closedAt": "2026-02-16",
      "updatedAt": "2026-02-16",
      "summary": "First actively exploited Chrome zero-day of 2026. Google patched CVE-2026-2441, a high-severity use-after-free in CSS (CSSFontFeatureValuesMap), in mid-February Chrome 145 updates. Google stated an exploit existed in the wild.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2025-14174",
      "title": "Google Chromium: Chromium Out of Bounds Memory Access Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-cve-2025-14174",
      "json": "https://pwn.watch/i/google-chromium-cve-2025-14174.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-14174"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-12-12",
      "closedAt": "2025-12-12",
      "updatedAt": "2025-12-12",
      "summary": "Google Chromium contains an out of bounds memory access vulnerability in ANGLE that could allow a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-12-12.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-13223",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-13223"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-11-19",
      "closedAt": "2025-11-19",
      "updatedAt": "2025-11-19",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption. Added to CISA KEV on 2025-11-19.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-10585",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-10585"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-09-23",
      "closedAt": "2025-09-23",
      "updatedAt": "2025-09-23",
      "summary": "Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. Added to CISA KEV on 2025-09-23.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2025-6558",
      "title": "Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-cve-2025-6558",
      "json": "https://pwn.watch/i/google-chromium-cve-2025-6558.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-6558"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-07-22",
      "closedAt": "2025-07-22",
      "updatedAt": "2025-07-22",
      "summary": "Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-07-22.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-6554",
      "title": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-6554"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-07-02",
      "closedAt": "2025-07-02",
      "updatedAt": "2025-07-02",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-07-02.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2025-5419",
      "title": "Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-5419"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-06-05",
      "closedAt": "2025-06-05",
      "updatedAt": "2025-06-05",
      "summary": "Google Chromium V8 contains an out-of-bounds read and write vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-06-05.",
      "xPost": null
    },
    {
      "slug": "google-chromium-mojo-cve-2025-2783",
      "title": "Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability",
      "url": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783",
      "json": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium Mojo",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-2783"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-03-27",
      "closedAt": "2025-03-27",
      "updatedAt": "2025-03-27",
      "summary": "Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2025-03-27.",
      "xPost": null
    },
    {
      "slug": "fearless-wallet-extension-key-leak",
      "title": "Fearless Wallet browser extension leaked private keys for ~20 months",
      "url": "https://pwn.watch/i/fearless-wallet-extension-key-leak",
      "json": "https://pwn.watch/i/fearless-wallet-extension-key-leak.json",
      "status": "live",
      "severity": "critical",
      "patchStatus": "unpatched",
      "product": "Fearless Wallet browser extension (Chrome; Firefox build delisted)",
      "tags": [
        "chrome",
        "data-breach"
      ],
      "cveIds": [],
      "affectedVersions": [
        "3.0.1",
        "3.0.3",
        "3.0.4",
        "3.0.5"
      ],
      "fixedVersions": [],
      "startedAt": "2025-02-19",
      "closedAt": null,
      "updatedAt": "2026-10-22T18:15:27+02:00",
      "summary": "The Polkadot Community Foundation warned that Fearless Wallet browser-extension versions 3.0.1, 3.0.3, 3.0.4 and 3.0.5 contained code, added Feb 19 2025 inside a large 'TON ecosystem' change, that sent private keys/recovery data to an attacker server when the wallet was unlocked. The code was active at different times until Oct 10 2026. Eight users have reported losses totalling 17,286 DOT. Anyone who used the extension since Feb 2025 must create a new keypair in another wallet and move funds.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-7965",
      "title": "Google Chromium V8 Inappropriate Implementation",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-7965"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-08-21",
      "closedAt": "2024-08-28",
      "updatedAt": "2024-08-28",
      "summary": "Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-08-28.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-7971",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-7971"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-08-21",
      "closedAt": "2024-08-26",
      "updatedAt": "2024-08-26",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-08-26.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-5274",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-5274"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-28",
      "closedAt": "2024-05-28",
      "updatedAt": "2024-05-28",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-28.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-4947",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4947"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-15",
      "closedAt": "2024-05-20",
      "updatedAt": "2024-05-20",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. Added to the CISA KEV catalog on 2024-05-20.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-4761",
      "title": "Google Chromium V8 Out-of-Bounds Memory Write",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4761"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-14",
      "closedAt": "2024-05-16",
      "updatedAt": "2024-05-16",
      "summary": "Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-16.",
      "xPost": null
    },
    {
      "slug": "google-chromium-cve-2024-4671",
      "title": "Google Chromium Visuals Use-After-Free",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671",
      "json": "https://pwn.watch/i/google-chromium-cve-2024-4671.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-4671"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-05-09",
      "closedAt": "2024-05-13",
      "updatedAt": "2024-05-13",
      "summary": "Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-05-13.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-4762",
      "title": "Google Chromium V8 Type Confusion",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-4762"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-02-06",
      "closedAt": "2024-02-06",
      "updatedAt": "2024-02-06",
      "summary": "Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-02-06. CVE-2023-4762 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2024-0519",
      "title": "Google Chromium V8 Out-of-Bounds Memory Access",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2024-0519"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-16",
      "closedAt": "2024-01-17",
      "updatedAt": "2024-01-17",
      "summary": "Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to the CISA KEV catalog on 2024-01-17.",
      "xPost": null
    },
    {
      "slug": "google-chromium-webrtc-cve-2023-7024",
      "title": "Google Chromium WebRTC Heap Buffer Overflow",
      "url": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024",
      "json": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium WebRTC",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-7024"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-02",
      "closedAt": "2024-01-02",
      "updatedAt": "2024-01-02",
      "summary": "Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome. Added to the CISA KEV catalog on 2024-01-02. CVE-2023-7024 was assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "google-chromium-skia-cve-2023-6345",
      "title": "Google Chromium Skia: Integer Overflow (CVE-2023-6345)",
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345",
      "json": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium Skia",
      "tags": [
        "google",
        "android",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-6345"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-11-30",
      "closedAt": "2023-11-30",
      "updatedAt": "2023-11-30",
      "summary": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. Added to CISA KEV on 2023-11-30.",
      "xPost": null
    },
    {
      "slug": "google-chromium-libvpx-cve-2023-5217",
      "title": "Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)",
      "url": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217",
      "json": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium libvpx",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-5217"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-10-02",
      "closedAt": "2023-10-02",
      "updatedAt": "2023-10-02",
      "summary": "Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome. Added to CISA KEV on 2023-10-02.",
      "xPost": null
    },
    {
      "slug": "libwebp-heap-overflow-cve-2023-4863",
      "title": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863",
      "json": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "libwebp (Google Chrome and everything that bundles libwebp)",
      "tags": [
        "node",
        "python",
        "libwebp",
        "google",
        "chrome",
        "electron",
        "zero-day",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-4863"
      ],
      "affectedVersions": [
        "Google Chrome before 116.0.5845.187; libwebp before 1.3.2 (NVD)"
      ],
      "fixedVersions": [
        "Chrome 116.0.5845.187",
        "libwebp 1.3.2",
        "Bundling apps/libraries: see each vendor's advisory"
      ],
      "startedAt": "2023-09-11",
      "closedAt": "2023-09-13",
      "updatedAt": "2023-09-13",
      "summary": "A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-3079",
      "title": "Google Chromium V8: Type Confusion (CVE-2023-3079)",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-3079"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-06-07",
      "closedAt": "2023-06-07",
      "updatedAt": "2023-06-07",
      "summary": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-06-07.",
      "xPost": null
    },
    {
      "slug": "google-chromium-skia-cve-2023-2136",
      "title": "Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)",
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136",
      "json": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Google Chromium Skia",
      "tags": [
        "google",
        "android",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-2136"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-21",
      "closedAt": "2023-04-21",
      "updatedAt": "2023-04-21",
      "summary": "Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. Added to CISA KEV on 2023-04-21.",
      "xPost": null
    },
    {
      "slug": "google-chromium-v8-cve-2023-2033",
      "title": "Google Chromium V8: Type Confusion (CVE-2023-2033)",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033",
      "json": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium V8",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-2033"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-04-17",
      "closedAt": "2023-04-17",
      "updatedAt": "2023-04-17",
      "summary": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-04-17.",
      "xPost": null
    },
    {
      "slug": "google-chromium-network-service-cve-2022-3038",
      "title": "Google Chromium Network Service: Use-After-Free (CVE-2022-3038)",
      "url": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038",
      "json": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Google Chromium Network Service",
      "tags": [
        "google",
        "chrome",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2022-3038"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2023-03-30",
      "closedAt": "2023-03-30",
      "updatedAt": "2023-03-30",
      "summary": "Google Chromium Network Service contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA KEV on 2023-03-30.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "fearless-wallet-extension-key-leak",
      "incidentTitle": "Fearless Wallet browser extension leaked private keys for ~20 months",
      "severity": "critical",
      "status": "live",
      "patchStatus": "unpatched",
      "date": "2026-10-21",
      "title": "Polkadot Community Foundation publishes security notice (14:00 UTC); 8 users report 17,286 DOT lost.",
      "body": null,
      "sourceUrl": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058",
      "url": "https://pwn.watch/i/fearless-wallet-extension-key-leak"
    },
    {
      "incident": "fearless-wallet-extension-key-leak",
      "incidentTitle": "Fearless Wallet browser extension leaked private keys for ~20 months",
      "severity": "critical",
      "status": "live",
      "patchStatus": "unpatched",
      "date": "2026-10-10",
      "title": "Last known period the exfiltration code was active (it could be re-enabled).",
      "body": null,
      "sourceUrl": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058",
      "url": "https://pwn.watch/i/fearless-wallet-extension-key-leak"
    },
    {
      "incident": "google-chromium-cve-2025-14174",
      "incidentTitle": "Google Chromium: Chromium Out of Bounds Memory Access Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-12",
      "title": "CISA added CVE-2025-14174 to the KEV catalog (due 2026-01-02).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-cve-2025-14174"
    },
    {
      "incident": "google-chromium-v8-cve-2025-13223",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-11-19",
      "title": "CISA added CVE-2025-13223 to the KEV catalog (due 2025-12-10).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-13223"
    },
    {
      "incident": "google-chromium-v8-cve-2025-10585",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-09-23",
      "title": "CISA added CVE-2025-10585 to the KEV catalog (due 2025-10-14).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-10585"
    },
    {
      "incident": "google-chromium-cve-2025-6558",
      "incidentTitle": "Google Chromium: Chromium ANGLE and GPU Improper Input Validation Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-22",
      "title": "CISA added CVE-2025-6558 to the KEV catalog (due 2025-08-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-cve-2025-6558"
    },
    {
      "incident": "google-chromium-v8-cve-2025-6554",
      "incidentTitle": "Google Chromium V8: Chromium V8 Type Confusion Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-02",
      "title": "CISA added CVE-2025-6554 to the KEV catalog (due 2025-07-23).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-6554"
    },
    {
      "incident": "google-chromium-v8-cve-2025-5419",
      "incidentTitle": "Google Chromium V8: Chromium V8 Out-of-Bounds Read and Write Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-05",
      "title": "CISA added CVE-2025-5419 to the KEV catalog (due 2025-06-26).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2025-5419"
    },
    {
      "incident": "google-chromium-mojo-cve-2025-2783",
      "incidentTitle": "Google Chromium Mojo: Chromium Mojo Sandbox Escape Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-27",
      "title": "CISA added CVE-2025-2783 to the KEV catalog (due 2025-04-17).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-mojo-cve-2025-2783"
    },
    {
      "incident": "fearless-wallet-extension-key-leak",
      "incidentTitle": "Fearless Wallet browser extension leaked private keys for ~20 months",
      "severity": "critical",
      "status": "live",
      "patchStatus": "unpatched",
      "date": "2025-02-19",
      "title": "Malicious code merged into the extension's public source as part of a 'TON ecosystem' PR.",
      "body": null,
      "sourceUrl": "https://forum.polkadot.network/t/security-notice-fearless-wallet-browser-extension-leaked-private-keys/19058",
      "url": "https://pwn.watch/i/fearless-wallet-extension-key-leak"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7965",
      "incidentTitle": "Google Chromium V8 Inappropriate Implementation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-28",
      "title": "CISA added CVE-2024-7965 to the KEV catalog (federal deadline 2024-09-18)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7971",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-26",
      "title": "CISA added CVE-2024-7971 to the KEV catalog (federal deadline 2024-09-16)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7965",
      "incidentTitle": "Google Chromium V8 Inappropriate Implementation",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CVE-2024-7965 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-7965",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7965"
    },
    {
      "incident": "google-chromium-v8-cve-2024-7971",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-08-21",
      "title": "CVE-2024-7971 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-7971",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-7971"
    },
    {
      "incident": "google-chromium-v8-cve-2024-5274",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-28",
      "title": "CVE-2024-5274 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-5274",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274"
    },
    {
      "incident": "google-chromium-v8-cve-2024-5274",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-28",
      "title": "CISA added CVE-2024-5274 to the KEV catalog (federal deadline 2024-06-18)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-5274"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4947",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-20",
      "title": "CISA added CVE-2024-4947 to the KEV catalog (federal deadline 2024-06-10)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4761",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Write",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-16",
      "title": "CISA added CVE-2024-4761 to the KEV catalog (federal deadline 2024-06-06)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4947",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-15",
      "title": "CVE-2024-4947 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4947",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4947"
    },
    {
      "incident": "google-chromium-v8-cve-2024-4761",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Write",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-14",
      "title": "CVE-2024-4761 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4761",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-4761"
    },
    {
      "incident": "google-chromium-cve-2024-4671",
      "incidentTitle": "Google Chromium Visuals Use-After-Free",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-13",
      "title": "CISA added CVE-2024-4671 to the KEV catalog (federal deadline 2024-06-03)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671"
    },
    {
      "incident": "google-chromium-cve-2024-4671",
      "incidentTitle": "Google Chromium Visuals Use-After-Free",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-05-09",
      "title": "CVE-2024-4671 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-4671",
      "url": "https://pwn.watch/i/google-chromium-cve-2024-4671"
    },
    {
      "incident": "google-chromium-v8-cve-2023-4762",
      "incidentTitle": "Google Chromium V8 Type Confusion",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-02-06",
      "title": "CISA added CVE-2023-4762 to the KEV catalog (federal deadline 2024-02-27)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-4762"
    },
    {
      "incident": "google-chromium-v8-cve-2024-0519",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Access",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CISA added CVE-2024-0519 to the KEV catalog (federal deadline 2024-02-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519"
    },
    {
      "incident": "google-chromium-v8-cve-2024-0519",
      "incidentTitle": "Google Chromium V8 Out-of-Bounds Memory Access",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-16",
      "title": "CVE-2024-0519 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-0519",
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2024-0519"
    },
    {
      "incident": "google-chromium-webrtc-cve-2023-7024",
      "incidentTitle": "Google Chromium WebRTC Heap Buffer Overflow",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-02",
      "title": "CISA added CVE-2023-7024 to the KEV catalog (federal deadline 2024-01-23)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/google-chromium-webrtc-cve-2023-7024"
    },
    {
      "incident": "google-chromium-skia-cve-2023-6345",
      "incidentTitle": "Google Chromium Skia: Integer Overflow (CVE-2023-6345)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-11-30",
      "title": "CISA added CVE-2023-6345 to the KEV catalog (due 2023-12-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-6345"
    },
    {
      "incident": "google-chromium-libvpx-cve-2023-5217",
      "incidentTitle": "Google Chromium libvpx: Heap Buffer Overflow (CVE-2023-5217)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-02",
      "title": "CISA added CVE-2023-5217 to the KEV catalog (due 2023-10-23).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-libvpx-cve-2023-5217"
    },
    {
      "incident": "libwebp-heap-overflow-cve-2023-4863",
      "incidentTitle": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-13",
      "title": "CISA adds CVE-2023-4863 to the KEV catalog",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863"
    },
    {
      "incident": "libwebp-heap-overflow-cve-2023-4863",
      "incidentTitle": "libwebp heap overflow exploited in the wild (CVE-2023-4863)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-09-11",
      "title": "Chrome stable update fixes CVE-2023-4863; Google says an exploit exists in the wild",
      "body": null,
      "sourceUrl": "https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html",
      "url": "https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863"
    },
    {
      "incident": "google-chromium-v8-cve-2023-3079",
      "incidentTitle": "Google Chromium V8: Type Confusion (CVE-2023-3079)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-06-07",
      "title": "CISA added CVE-2023-3079 to the KEV catalog (due 2023-06-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-3079"
    },
    {
      "incident": "google-chromium-skia-cve-2023-2136",
      "incidentTitle": "Google Chromium Skia: Chrome Skia Integer Overflow (CVE-2023-2136)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-21",
      "title": "CISA added CVE-2023-2136 to the KEV catalog (due 2023-05-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-skia-cve-2023-2136"
    },
    {
      "incident": "google-chromium-v8-cve-2023-2033",
      "incidentTitle": "Google Chromium V8: Type Confusion (CVE-2023-2033)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-04-17",
      "title": "CISA added CVE-2023-2033 to the KEV catalog (due 2023-05-08).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-v8-cve-2023-2033"
    },
    {
      "incident": "google-chromium-network-service-cve-2022-3038",
      "incidentTitle": "Google Chromium Network Service: Use-After-Free (CVE-2022-3038)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-03-30",
      "title": "CISA added CVE-2022-3038 to the KEV catalog (due 2023-04-20).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/google-chromium-network-service-cve-2022-3038"
    }
  ]
}